You can revoke Lets-Box's access to your Box account in two places. For full revocation, do both.
1. In the plugin (WordPress)
On the plugin's settings page in your WordPress dashboard, click the deauthorize option next to the linked Box account. The plugin removes the stored access token from your site.
2. In your Box account
- Sign in at app.box.com/account.
- Navigate to Account Settings > Security > Login activity.
- Find Lets-Box in the list of authorized apps.
- Click Forget App.
If you're using your own custom Box app, you can also delete the app at the Box Developer Console. That removes all OAuth grants for that app at once.
What happens after revocation
The plugin loses access to the Box account immediately. Re-authorize from the plugin's settings page if you want to reconnect.
For an overview of revocation across all providers, see How do I revoke the plugin's access to my cloud account?